This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/LN_2TO4-2cWGcghKrec6RsVvm3s.roa File: LN_2TO4-2cWGcghKrec6RsVvm3s.roa (raw, json) Hash identifier: cO3Hgbh6AsMQbWDVBGe7Z58x/0lqi5Pdq2cGy4sWnEg= Subject key identifier: 2C:DF:F6:4C:EE:3E:D9:C5:86:72:08:4A:AD:E7:3A:46:C5:6F:9B:7B Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348 Certificate serial: 019AD6666DCE5A849EA7A08F7B5C5EE9324D Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/LN_2TO4-2cWGcghKrec6RsVvm3s.roa Signing time: Sun 30 Nov 2025 20:13:48 +0000 ROA not before: Sun 30 Nov 2025 20:13:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 93.95.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.mft rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d6:66:6d:ce:5a:84:9e:a7:a0:8f:7b:5c:5e:e9:32:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348 Validity Not Before: Nov 30 20:13:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2cdff64cee3ed9c58672084aade73a46c56f9b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:ef:0c:78:2c:b3:b9:43:60:00:22:3f:43: 06:3c:0a:af:6c:12:f8:82:bf:85:9b:d4:74:b2:28: 54:63:8e:e6:3b:2f:98:20:13:59:cb:54:b4:ec:77: f2:2b:49:14:46:6b:ac:b7:e5:42:fb:f5:05:18:bc: c2:04:ef:b9:03:86:7d:6f:d3:dd:46:87:f1:1e:c0: a5:46:6d:56:e2:cf:f8:32:08:18:03:37:95:99:04: 0e:1b:a6:1b:d3:da:2c:3b:09:0f:d8:ca:fa:0f:20: fe:a4:32:ab:75:a3:a9:46:10:5f:c7:3b:ab:53:6c: c1:43:f1:ac:5a:1d:fa:6c:10:24:b0:73:04:74:10: f0:4a:31:ed:8a:c6:f3:6e:56:40:35:fe:ef:bb:05: 7a:ab:31:44:34:69:f2:b7:c6:52:91:0f:fa:b4:14: 45:7f:93:cb:84:c0:3f:9a:b5:67:52:3b:70:b0:2c: 24:b6:60:c1:e1:85:4c:9b:88:2c:18:99:00:73:ee: 66:85:39:fc:eb:35:e8:93:53:4d:7c:b0:1e:12:ef: 10:7e:ae:0b:6b:f7:17:a6:33:3b:cf:f3:d7:24:ba: f5:ad:a6:0f:bb:ac:61:f2:bf:ca:6e:ca:4b:e7:ee: 4e:b8:c7:0b:fd:78:c7:28:f1:59:61:ec:79:9b:72: 5f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DF:F6:4C:EE:3E:D9:C5:86:72:08:4A:AD:E7:3A:46:C5:6F:9B:7B X509v3 Authority Key Identifier: keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/LN_2TO4-2cWGcghKrec6RsVvm3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.24.0/24 Signature Algorithm: sha256WithRSAEncryption 91:73:1b:66:2f:a6:4c:2d:16:e8:b2:14:a2:dd:31:e0:32:65: e0:78:0d:d2:9a:7a:49:b7:6c:22:84:bd:e7:e4:9c:1a:a2:58: a7:32:b0:94:fa:16:19:4d:d2:c4:6d:47:d2:9a:e0:52:a6:d3: 67:a1:d1:72:39:be:ac:c6:23:f3:fb:87:9f:04:74:7c:d6:59: 4d:f4:a3:1e:fe:09:49:bc:85:69:9d:0d:71:72:2b:22:3b:ac: 54:36:c9:c8:ee:b5:73:c6:58:97:53:c9:04:96:da:94:d7:91: 51:76:c7:58:02:1d:4c:86:73:36:8e:df:ff:80:01:d6:69:f9: 6b:b7:57:50:4d:37:6c:f4:33:af:20:27:5a:ab:86:8c:cc:c3: 2c:20:ca:ec:0e:41:a7:11:16:66:19:84:81:bf:27:ac:c1:8e: ea:99:de:97:88:47:9e:ca:30:41:3f:cc:a8:f5:32:b4:ae:41: e6:41:64:b4:e2:30:11:eb:3c:42:04:22:0d:8e:60:38:b5:bb: 6b:e2:9b:fe:f6:fc:50:81:d5:0d:bb:0a:f6:d0:e2:36:a8:1c: 3e:22:8f:8c:0f:bc:2f:c4:dd:bd:5b:27:80:a7:6f:15:41:33: fb:15:02:7c:46:58:ec:6c:ae:53:43:31:d9:95:fb:13:36:e4: 3d:5b:8d:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrWZm3OWoSep6CPe1xe6TJNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNzhlMDA2NmJiMjdjNWY1MmU3MDI1ZDYxMTkwZGFhOTBi OTczNDgwHhcNMjUxMTMwMjAxMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyY2RmZjY0Y2VlM2VkOWM1ODY3MjA4NGFhZGU3M2E0NmM1NmY5YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02LvDHgss7lDYAAiP0MGPAqvbBL4 gr+Fm9R0sihUY47mOy+YIBNZy1S07HfyK0kURmust+VC+/UFGLzCBO+5A4Z9b9Pd RofxHsClRm1W4s/4MggYAzeVmQQOG6Yb09osOwkP2Mr6DyD+pDKrdaOpRhBfxzur U2zBQ/GsWh36bBAksHMEdBDwSjHtisbzblZANf7vuwV6qzFENGnyt8ZSkQ/6tBRF f5PLhMA/mrVnUjtwsCwktmDB4YVMm4gsGJkAc+5mhTn86zXok1NNfLAeEu8Qfq4L a/cXpjM7z/PXJLr1raYPu6xh8r/KbspL5+5OuMcL/XjHKPFZYex5m3JfeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCzf9kzuPtnFhnIISq3nOkbFb5t7MB8GA1UdIwQY MBaAFC944AZrsnxfUucCXWEZDaqQuXNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgt YjJiNzk2MmMyZDgxLzEvTE5fMlRPNC0yY1dHY2doS3JlYzZSc1Z2bTNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgtYjJiNzk2MmMyZDgx LzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV8YMA0G CSqGSIb3DQEBCwUAA4IBAQCRcxtmL6ZMLRboshSi3THgMmXgeA3SmnpJt2wihL3n 5JwaolinMrCU+hYZTdLEbUfSmuBSptNnodFyOb6sxiPz+4efBHR81llN9KMe/glJ vIVpnQ1xcisiO6xUNsnI7rVzxliXU8kEltqU15FRdsdYAh1MhnM2jt//gAHWaflr t1dQTTds9DOvICdaq4aMzMMsIMrsDkGnERZmGYSBvyeswY7qmd6XiEeeyjBBP8yo 9TK0rkHmQWS04jAR6zxCBCINjmA4tbtr4pv+9vxQgdUNuwr20OI2qBw+Io+MD7wv xN29WyeAp28VQTP7FQJ8RljsbK5TQzHZlfsTNuQ9W409 -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:36 2025 by rpki-client